Back to Home

Legal

Data Retention Policy

Effective February 2026 — AutoPart Connect

1. Purpose

This policy explains how long AutoPart Connect retains different categories of information and why retention is required. Retention periods are designed to support:

  • legal compliance;
  • financial records;
  • dispute resolution;
  • fraud prevention;
  • security investigations;
  • platform operations.

2. Retention Periods

Information TypeRetention Period
User account informationAccount lifetime plus 7 years where required
Completed transaction records7 years
Payment and refund records7 years
Dispute records and evidence7 years after closure
Audit logs7 years
Security events and login records2 years
User communications related to transactions7 years
Uploaded dispute evidence7 years after dispute closure
Marketing preferencesUntil withdrawal or deletion request
Password reset codesAutomatically deleted after expiry
Phone OTP recordsUp to 30 days

3. Category-Specific Retention Details

Identity Verification Information

Where identity verification services are used, verification records are retained for 7 years after account closure, unless deletion is required by law or contractual obligations.

Communications

Platform messages, customer/vendor communications and support interactions are retained for 3 years after transaction completion. Longer retention may apply where the communication forms part of a dispute or legal record.

Marketing Preferences

Marketing preferences are retained until the user unsubscribes or the account is closed.

Cookies and Technical Logs

Technical logs (IP addresses, device/browser information, session events) are retained for 12 months, unless required longer for security investigations.

4. Deletion Requests

Users may request deletion of personal information via the Help Centre or by contacting AutoPart Connect directly.

Deletion requests may be refused or limited where retention is required for:

  • Australian tax obligations;
  • financial reporting;
  • fraud prevention;
  • legal claims;
  • consumer protection requirements;
  • dispute resolution;
  • security records.

Where deletion is approved, information will be securely deleted or anonymised. A response confirmation will be sent to the requestor within a reasonable time.

This Policy should be read together with our Terms & Conditions, Privacy Policy and Refund Policy. For deletion requests, contact us via Help Centre.